CWE-403 · 7 kayıt

Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

Bu sınıftaki CVE’ler

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2024-21626Silahlaştırılmış	runc container breakout through process.cwd trickery and leaked fdslinuxfoundation · runc · CWE-403	Yüksek8,6	—	%18,9	31 Oca 2024
37İzleyin	CVE-2026-40042İstismar yok	Pachno 1.0.6 Wiki TextParser XML External Entity Injectionpachno · pachno · CWE-403 Kimlik doğrulamasız XXE	Kritik9,3	—	%0,6	13 Nis 2026
37İzleyin	CVE-2025-15114İstismar yok	Ksenia Security lares Home Automation 1.6 PIN Exposure Vulnerabilitykseniasecurity · lares firmware · CWE-403 Kimlik doğrulamasız	Kritik9,3	—	%0,5	30 Ara 2025
35İzleyin	CVE-2026-16526İstismar yok	Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerabilityred hat · red hat enterprise linux 10 · CWE-403 RCE	Yüksek8,8	—	%0,6	30 Tem 2026
34İzleyin	CVE-2024-58280İstismar yok	CMSimple 5.15 Remote Command Execution via Extensions Configurationcmsimple · cmsimple · CWE-403 RCE	Yüksek8,6	—	%0,9	10 Ara 2025
29İzleyin	CVE-2025-3032İstismar yok	Leaking file descriptors from the fork servermozilla · firefox · CWE-403 Kimlik doğrulamasız	Yüksek7,4	—	%0,4	1 Nis 2025
17İzleyin	CVE-2026-33263İstismar yok	When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor haopen-xchange gmbh · ox dovecot pro · CWE-403 Hizmet dışı bırakma	Orta4,3	—	%0,6	28 Ağu 2026

CVE-2024-21626
40Planlayın
runc container breakout through process.cwd trickery and leaked fds
YüksekCVSS 8,6SilahlaştırılmışEPSS %19
linuxfoundation · runc31 Oca 2024
CVE-2026-40042
37İzleyin
Pachno 1.0.6 Wiki TextParser XML External Entity Injection
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- XXE
pachno · pachno13 Nis 2026
CVE-2025-15114
37İzleyin
Ksenia Security lares Home Automation 1.6 PIN Exposure Vulnerability
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
kseniasecurity · lares firmware30 Ara 2025
CVE-2026-16526
35İzleyin
Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
red hat · red hat enterprise linux 1030 Tem 2026
CVE-2024-58280
34İzleyin
CMSimple 5.15 Remote Command Execution via Extensions Configuration
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
cmsimple · cmsimple10 Ara 2025
CVE-2025-3032
29İzleyin
Leaking file descriptors from the fork server
YüksekCVSS 7,4İstismar yokEPSS %0
- Kimlik doğrulamasız
mozilla · firefox1 Nis 2025
CVE-2026-33263
17İzleyin
When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor ha
OrtaCVSS 4,3İstismar yokEPSS %1
- Hizmet dışı bırakma
open-xchange gmbh · ox dovecot pro28 Ağu 2026